Privacy Policy

Effective 30 April 2026Version 2.0

Accrewal is operated by Wekno Technologies Limited (“Accrewal”, “we”, “us”, or “our”), a company registered in England and Wales (Company No. 16933458) with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our website, mobile applications, and platform (together, the “Services”). It also describes your rights and how the law protects you.

If you have any questions, you can contact us at support@accrewal.com .

1. Overview

Accrewal provides a platform for individuals and clubs within the watersports industry to log experience, track verified activity, and access opportunities to progress on the water. In delivering these services, we process personal data in a way that is transparent, secure, and compliant with applicable data protection laws, including the UK GDPR.

We are the data controller for the personal data processed through the Services.

2. Who uses Accrewal

Our Services are used by individuals and watersports clubs. Individuals use Accrewal to record and develop their experience, while clubs use our platform to verify activity and support their members.

We permit users aged 13 and over to create accounts. Where a user is aged between 13 and 15, we require verifiable parental consent before the account is activated. Without this consent, access to the Services is not granted.

3. Data we collect

We collect personal data directly from you, automatically through your use of the Services, and through the systems that support our platform.

When you create an account, we collect identifying information such as your name, email address, phone number, date of birth, country, and login credentials. Your credentials are securely managed through our authentication providers and are not stored in plain text.

As you use Accrewal, we collect profile information and activity data, including your logged watersports experience, participation records, and any content you choose to upload, such as a profile image. We also collect preferences, including your communication and marketing choices.

Where payments are required, they are processed securely by third-party providers such as Stripe or platform-specific payment systems (such as Apple In-App Purchases). We do not store full payment card details.

We also collect technical and usage data automatically. This includes your IP address, device type, browser, operating system, and how you interact with the platform—such as pages viewed, features used, and session activity. This information helps us understand how the Services are used and improve performance.

In certain cases, we may collect location data. This only occurs where you choose to use location-based features (such as proximity search) and explicitly grant permission for location access.

Finally, if you contact us, we will process the content of your communications, including support requests and correspondence.

4. How we use personal data

We use personal data to operate, maintain, and improve Accrewal. This includes creating and managing accounts, delivering core platform functionality, and enabling users to log and verify watersports experience.

Your data is also used to personalise your experience, for example by tailoring content, surfacing relevant opportunities, or improving how features are presented. We may use your data to send push notifications about session verifications and club activity.

We use personal data to provide customer support, respond to enquiries, and maintain the safety and integrity of the platform. This includes monitoring usage, detecting misuse, and preventing fraud. We may use your data, as anonymised analytics, to improve the platform.

We may also use your data to communicate with you. This includes essential service communications as well as marketing messages where permitted by law. You can control your marketing preferences at any time.

In addition, we process personal data where necessary to comply with legal and regulatory obligations. This includes for maintaining a legally compliant record of your acceptance of our terms

5. Legal basis (GDPR)

We process personal data on several lawful bases under the UK GDPR.

Most of our processing is necessary to perform the contract we have with you, such as providing access to the platform and its features.

We also process data based on our legitimate interests, including improving our Services, ensuring security, preventing fraud, and understanding how users interact with the platform. Where we rely on this basis, we ensure our interests are balanced against your rights.

Where required, we rely on your consent. This applies to activities such as sending certain marketing communications, using non-essential cookies, and accessing location data. You can withdraw your consent at any time.

In some cases, we process data to comply with legal obligations, such as maintaining financial records.

6. Cookies and similar technologies

We use cookies and similar technologies to operate and improve the Services. These technologies help us maintain secure sessions, remember your preferences, and understand how the platform is used.

Analytics tools, including PostHog, allow us to analyse usage patterns and improve performance. These tools are only used where appropriate consent has been obtained.

You can manage your cookie preferences through our cookie banner and browser settings. We may update our use of cookies over time and will reflect any changes in this policy.

7. Marketing communications

We may send you marketing communications where permitted by applicable law. This may include information about new features, opportunities, or updates relevant to your use of Accrewal.

You can opt out of marketing communications at any time by using the unsubscribe link in emails or by updating your preferences within your account.

8. Sharing Personal Data

We do not sell your personal data. However, we share data with trusted service providers who support the operation of our platform.

These providers include infrastructure, analytics, communications, payments, and technical service providers such as Vercel, Supabase Inc, PostHog, Stripe, Resend, Expo, Google Maps Platform, and OpenAI. Your data is stored securely using Supabase (EU-West-2, London). We use row-level security to ensure you can only access your own data. Data is encrypted in transit (TLS) and at rest.

These providers process personal data on our behalf and are subject to contractual obligations to protect it.

9. International Transfer

Some of our service providers operate outside the United Kingdom. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place, including the use of Standard Contractual Clauses.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

Account data is retained while your account is active and for a limited period thereafter in case of reactivation or legal necessity. Financial records are retained for the period required by law, typically up to six years. Usage and analytics data are retained for a shorter period to support product improvement, and support communications are retained as needed to manage user relationships.

11. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. This includes encryption of data in transit, secure infrastructure, and role-based access controls.

While no system can be completely secure, we continuously work to maintain a high standard of data protection.

12. Your rights (GDPR)

You have rights under data protection law, including the right to access, rectify, erase, or restrict the use of your personal data. You may also object to certain processing or request a copy of your data in a portable format.

Where processing is based on consent, you can object or withdraw that consent at any time.

To exercise your rights, contact us at support@accrewal.com . You also have the right to lodge a complaint with the Information Commissioner's Office.

13. Automatic Processing

We use automated tools, including systems provided by OpenAI, to assist with content moderation. These tools are used to flag potentially inappropriate content but do not make decisions that have a legal or similarly significant effect on users.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our Services or legal requirements. Where appropriate, we will notify you through the platform or by email.

15. Contact and complaints

If you have questions about this Privacy Policy or how we handle your data, you can contact us at:

  • support@accrewal.com